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FIELD OF THE INVENTION 
The present invention relates to digital fingerprints and, more particularly, to 
methods, apparatuses and systems for addressing the inaccuracies introduced by the 
unstable nature of digital fingerprint circuits and allowing reliable identification of the digital 
fingerprints. 

BACKGROUND OF THE INVENTION 
Silicon fingerprinting technology offers an inexpensive technique for generating 
unique digital signatures or identifications. According to one fingerprinting technology, the 
fabrication of a silicon die including chip features that are not perfectly precise creates a 
random effect that can be used to generate a random binary number. A circuit is embedded 
into each chip including a series of small, tightly-packed transistors and a comparator that 
compares the relative voltages between adjacent transistors. The impurities of dopant levels 
and variations in size among individual transistors that naturally occur in metal-oxide 
semiconductors result in varying voltage levels across transistors when they are powered up. 
According to the technology, a comparison of voltage levels among transistors yields a binary 
number unique to the chip. Specifically, starting at the first transistor or bit, the comparator 
compares the voltage of the first transistor to the voltage of the adjacent transistor. If the 
voltage level of the first transistor is less than that of the second transistor, the comparator 
yields a "0" for that bit. Conversely, if the voltage level of the first transistor exceeds the 
voltage level of the adjacent transistor, the comparator yields a value of "1 ." This process is 
repeated for each transistor in the series to yield the binary number resulting from the 
varying voltage levels of each transistor. 

The number of bits in the ID depends on how many transistors the circuit includes. 
During production, each bit sequence acquires a random pattern resulting from differences 
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in dopant levels and size among individual transistors. The result is a group of chips that 
have essentially inherited a identification as part of the manufacturing process, wherein each 
chip ends up with a sequence that is unique. If the silicon chip has enough transistors (bits), 
it can be used as a serial number or other device identification. According to the 
technology, the unique signature or identification is simply read from the chip when it is 
powered up. This bit sequence can be probed and stored in a database with pertinent 
information for later use. 

Silicon fingerprinting technology is not perfectly precise, however, in that the same 
circuit may not yield the same binary number upon successive reads of the chip. As 
described above, the random value of a particular bit is a function of an imbalance between 
the physical attributes of two transistors on the chip. Sometimes, the voltage difference 
between adjacent transistors is so small, the comparator can not reliably indicate which 
transistor is relatively high or low, causing certain of these bits to "flip" during some reads of 
the circuit. According to Siidtech, Inc. of Beaverton, Oregon, up to 5% of the bits in a given 
circuit can flip from one read to another. One solution to address the uncertainty is to use 
enough bits in the serial number to make it statistically impossible for a flipping of bits to 
cause misinterpretation of one serial number into another one. For example, a 51 2-bit 
sequence results in an enormous hamming distance (number of bit flips that could cause a 
misread) rendering it quite easy to unambiguously identify the original candidate. The 
method advocated by Siidtech, Inc. involves computing a distance between the number 
read from the circuit and all candidates stored in the database. In one form, an initial 
sequence of bits is used as an index to identify a list of candidates for further matching. 
However, this process can be problematic as the number of candidates grows large since the 
processing demands involved in verifying a digital fingerprint can become prohibitive, 
especially in situations where the digital fingerprint must be quickly identified. In light of the 
foregoing, a need exists for methods, apparatuses and systems that address the instabilities 
inherent in existing digital fingerprint technologies. 

SUMMARY OF THE INVENTION 

The present invention provides methods, apparatuses, and systems for identifying a 
digital fingerprint. In one embodiment, the present invention compensates for the 
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inaccuracies resulting from the unstable nature of the circuits that yield digital fingerprints 
and, therefore, allows for reliable identification of these digital fingerprints. According to 
one embodiment, the digital fingerprint (identification) is divided into a plurality of sections 
and stored in a database. According to this embodiment, fingerprints are identified by 
comparing the sections of the fingerprint to be identified with corresponding sections of the 
fingerprints stored in the database. The matching fingerprint, in one embodiment, is the 
fingerprint associated with a statistically sufficient number of matching fingerprint sections. 
Other embodiments of the present invention optimize the section lookup methodology 
based on the stability of the sections of the fingerprint. 



Figure 1 is a functional block diagram illustrating an embodiment of the present 
invention. 

Figure 2 is a flow chart diagram setting forth a method for calculating a most probable 
identification number. 

Figure 3 is a flow chart diagram providing a method allowing for identification of a 
digital fingerprint. 

Figure 4 is a flow chart diagram illustrating another method allowing for identification 
of a digital fingerprint. 

Figure 5 is a functional block diagram illustrating an embodiment of a digital 
fingerprint/control circuit according to the present invention. 



Figure 1 illustrates an embodiment of the apparatus according to the present 
invention. As Figure 1 shows, in one embodiment, the apparatus comprises identification 
lookup server 22, fingerprint section database 24. In one embodiment, the apparatus 
operates in conjunction with application server 23 and master database 28. Application 
server 23, in one embodiment, receives requests transmitted over computer network 30, 
executes application functionality as appropriate, and transmits responses in return. In one 
embodiment, identification lookup server 22 is operably connected to computer network 30 
to receive identification information from user device 40 via application server 23. As more 
fully described below, in the embodiment shown, application server 23 receives a 
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fingerprint or identification from user device 40 and transmits it to identification lookup 
server 22. Identification lookup server 22 receives identification information from user 
device 40 and scans fingerprint section database 24 to identify user device 40 (see below). 

According to one embodiment, the digital fingerprint (identification) is broken into a 
plurality of sections and stored in a fingerprint section database 24. In one embodiment, 
when identification lookup server 22 receives identification or fingerprint data from user 
device 40, it scans fingerprint section database 24 for stored sections that match 
corresponding sections of the identification or fingerprint transmitted from user device 40. 
In one embodiment, fingerprint section database 24 stores fingerprint sections in association 
with an index identification associated with user device 40. In one embodiment, 
identification lookup server 22 selects the index identification associated with a statistically 
sufficient number of matching fingerprint sections (see below). In one embodiment, the 
number of sections into which the fingerprint is divided and their length are predetermined. 

Fingerprint section database 24 can be a flat-file database, a relational database, or 
any other suitable database. In one embodiment, fingerprint section database 24 comprises 
a series of records, whose fields include an index identification and the sections of the 
fingerprint. In one embodiment, such records can also include other fields, such as the user 
or entity name associated with the fingerprint. In the embodiment shown in Figure 1, 
however, such data is stored in master database 28 in association with the index 
identification. More specifically, as Figure 1 shows, application server 23 is operably 
connected to master database 28. In one embodiment, master database 28 includes index 
identifications and data associated with each index identification. In one embodiment, such 
data is user account data, such as user name, address, account identification, and any other 
relevant account or device information. According to this embodiment, when identification 
lookup server 22 has identified the device (e.g., finding an index identification), application 
server 23 can use the index identification to access relevant data stored in master database 
28. Of course, the distribution of functionality and/or data described in the various 
embodiments is not required by any constraint. In one embodiment, a single computing 
device can execute the methods of the present invention and store the required data. 

In one.embodiment, fingerprint section database 24 comprises a plurality of 
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fingerprint section table^b. In one form, each fingerprint section table 26 includes the 
corresponding section of the fingerprint and the associated index identification. In one 
form, a single database server supports fingerprint section database 24. In another 
embodiment, each fingerprint section table 26 is supported by an individual database server 
5 to expedite identification of the fingerprint associated with user device 40. 

As Figure 1 shows, in one embodiment, user device 40 includes fingerprint circuit 42 
which, as discussed above, provides a unique binary number. In one embodiment, user 
device 40 includes digital fingerprint circuit 42, control circuit 60 and memory 62 (see 
Figure 5). In one embodiment, digital fingerprint circuit 42 comprises a series of tightly 
1 0 packed, small transistors (ID Cell Array 54) and a comparator 56 that compares the relative 
voltages of adjacent transistors. (See Background of the Invention, above and Figure 5). In 
3 another embodiment, fingerprint circuit 42 comprises static RAM, which, at initial power on, 

n yields a random binary number that can be used as a digital fingerprint. User device 40 can 

u 

g be any device that includes integrated circuits, including a personal computer, a cell phone, 

3 5 a personal digital assistant, an MP3 player, or any other suitable device. In one 
^ embodiment, user device 40 is a physical parameter sensing unit of the type disclosed in 

O application S.N. 09/303,021 filed April 30, 1999 and application S.N. 09/559,031 filed April 

^ ni 27, 2000,^both entitled "Method and System for Identifying Data Locations Associated with 

~ Real World Observations" and incorporated by. reference herein. In one form, digital 

Q0 fingerprint circuit 42 can be included on a separate, dedicated chip in user device 40. In a 
preferred form, fingerprint circuit 42 is integrated during manufacturing into the circuitry of 
an existing chip in user device 40. 

A. Center of Gravity Calculation and Storage of Digital Fingerprint 

One embodiment of the present invention provides methods and apparatuses 

25 yielding the most probable digital fingerprint output by a particular digital fingerprint circuit. 
Because the probability that a particular bit may flip upon successive reads of a digital 
fingerprint is a function of physical parameters, the probability function of its value does not 
change significantly over time, even though the bit itself may be very likely to flip. In one 
embodiment, the digital fingerprint is iteratively read a predetermined number of times in 

30 order to calculate the most likely value for each bit in the digital fingerprint. In one 
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embodiment, the most uxely digital fingerprint is stored and used for identification. 

Figure 5 illustrates an apparatus according to one embodiment of the present 
invention for calculating the most probable digital fingerprint from fingerprint circuit 42. In 
one embodiment, the apparatus comprises fingerprint circuit 42, control circuit 60 and 
5 memory 62. In the embodiment shown, fingerprint circuit 42 is a standard digital fingerprint 
circuit comprising sequencer 50, address input register 52, ID Cell Array 54, comparator 56, 
and analog bias 58. These components operate, as discussed above, to yield a binary 
number resulting from the relative voltage differences among the transistors in ID Cell Array 
54. Fingerprint circuit 42, however, can comprise static RAM or any other means of yielding 
1 0 a random string of bits. With the use of static RAM, the fingerprint, in one embodiment, is 
read at power on and does not involve the use of a comparator to compare relative voltages 

s — I 

%=* 

%0 of adjacent transistors. In one embodiment, control circuit 60 is configured to execute the 

LP 

method illustrated in Figure 2. 
ri As Figure 2 shows, control circuit 60 polls fingerprint circuit 42 a desired number (N) 

5 times and records each resulting fingerprint value (steps 1 02, 1 04, 1 06, 1 08 and 1 1 0). From 

* these recorded values, control circuit 60 calculates the most probable digital fingerprint 

O 

it} (Figure 2, step 1 1 2). In one embodiment, control circuit 60, on a bit by bit basis, calculates 

F2 : 

the most likely value for each bit based on the iterative reads described above. In one 

D embodiment, control circuit 60 also calculates a stability value (i.e., the probability that a 

u 

20 particular bit may flip) for at least one bit in the digital fingerprint (Figure 2, step 114) and 

stores it in memory 62. In one embodiment, control circuit 60 calculates a stability value for 
each bit in the digital fingerprint. However, to reduce the amount of stored data, In one 
embodiment, the digital fingerprint is divided into a plurality of sections. In one form of this 
embodiment, the control circuit 60 stores in memory 62 the most probable fingerprint and 

25 the stability values corresponding to the least stable bit in each section of the fingerprint 

(Figure 2, step 1 1 6). As discussed more fully below, embodiments of the present invention 
use these stability values in an optimized lookup method. According to one embodiment of 
the present invention, control circuit 60 calculates the most probable fingerprint and, 
optionally, stability values and stores such values in memory each time user device 40 is 

30 powered up. 
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According to the invention, the most probable fingerprint must, at some point, be 
stored in a database (such as fingerprint section database 24 shown in Figure 1) in 
association with other data in order for the corresponding user device 40 to be subsequently 
identified. In one embodiment, calculation of the most probable fingerprint from user 
5 device 40 is integrated into the manufacturing process. Specifically, during the 

manufacturing process, fingerprint circuit 42 is polled according to the method of Figure 2 or 
any other suitable method to calculate the most probable fingerprint. In one embodiment, 
this most probable fingerprint is stored in a database (such as fingerprint section database 
24) in association with other data (e.g., an index identification). In one embodiment, the 

10 most probable fingerprint and/or index identification can later be associated with other data 
(e.g., user name, user account data, and the like) and used to identify an associated user or 

3 device. 

jj In embodiments where the most probable fingerprint is stored during the 

p ; manufacturing process, user device 40 can be configured to transmit only the most stable 

If 5 sections of the fingerprint and corresponding section identifications. These sections and 
*J section identifications can be used to identify user device 40 according to an optimized 

3 lookup methodology, discussed below. In another embodiment, the most probable 

jj fingerprint from fingerprint circuit 42 is performed post-manufacturing and transmitted from 

Z a remote location and stored in a database, such as fingerprint section database 24. For 

example and in one embodiment, the fingerprint corresponding to user device 40 may be 
stored in fingerprint section database 24 during a registration of such device by a user. In 
one embodiment, a user powers up user device 40, causing it to calculate and store the 
most probable fingerprint, and transmits the most probable fingerprint via computer network 
30 to application server 23 (see Figure 1). Application server 23, in this embodiment, 
25 transmits the most probable fingerprint to identification lookup server 22, which stores the 
fingerprint in a database. In one embodiment, identification lookup server 22 breaks the 
fingerprint into sections and stores them in the appropriate tables 26 of fingerprint section 
database 24 in association with an index identification (e.g., an account identification, a 
device identification, etc.). During this registration, other data corresponding to the user can 
30 be stored in master database 28 in association with the index identification. In another 
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embodiment, the stabihcy values of each bit in the digital fingerprint is stored in association 
with the index identification. These stability values can be used in addition to or in lieu of 
the digital fingerprint to identify the device during a lookup. 

Furthermore, in an embodiment using a static RAM to provide the digital fingerprint 
at power on, instead of storing a continuous set of bits, the algorithm can be adapted to 
using indexed entries. This allows supporting systems where the random bits are not densely 
packed with one another. In one embodiment, only bits that are likely to flip and their 
respective positions need be stored to later identify the fingerprint. 
B. Fuzzy Lookup Methodology 

According to one embodiment of the present invention, each fingerprint is broken or 
divided into sections, which are compared to corresponding sections of previously stored 
fingerprints in order to find a match. According to one embodiment, a digital fingerprint is 
identified with respect to how many matching sections are found. In one embodiment, 
fingerprints are divided into sections of equal length. For example and in one embodiment, 
a 288-bit fingerprint is divided into 12 sections each comprising 24 bits. Therefore, a 
particular fingerprint section has a probability of 1 :1 6,777,21 6 (1 :2 24 ) of being a match. 
Depending on the population size (1 million, for example) of fingerprints stored in the 
database, a fingerprint candidate in the database that includes two matching sections is very 
likely the matching fingerprint. In one embodiment, in a population of 1 million 
fingerprints, a fingerprint candidate that includes three matching sections is statistically 
sufficient for an identification. Accordingly, this embodiment of the present invention 
compensates for the potential that a plurality of bits in the digital fingerprint may flip since 
only a statistically sufficient number of matching sections need be found, rather than a 
matching of the entire fingerprint. 

Figure 3 illustrates a method for identifying a device based on its digital fingerprint. 
In the embodiment shown, identification lookup server 22 receives a digital fingerprint 
(Figure 3, step 202) and breaks the fingerprint into sections, the number and length of which 
are determined by the structure and arrangement of fingerprint section database 24 (step 
204). In another embodiment, identification lookup server 22 receives the digital fingerprint 
already divided into sections. In one embodiment, starting at the first section (step 206), 
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identification lookup server 22 scans fingerprint section database 24 for matching sections 
(step 208). If a matching section is found (step 210), the index identification associated with 
that section is recorded (step 212). In the embodiment shown, this process is repeated for 
all sections of the fingerprint (steps 21 4, 216 and 208). In another embodiment, the process 
continues until a statistically sufficient number of matches corresponding to a single index 
identification is found. In the embodiment shown in Figure 3, however, once all sections 
have been scanned, identification lookup server 22 selects the index identification with a 
statistically sufficient number of matching sections (step 218). 

In one embodiment, identification lookup server 22 transmits each fingerprint section 
to fingerprint section database 24 comprising section tables 26 (see Figure 1). In one 
embodiment, each section table 26 of fingerprint section database 24 is supported by a 
separate database server. In one form of this embodiment, identification lookup server 22 
transmits each section of the received fingerprint to the appropriate section table database 
server to find matching sections. In this embodiment, identification server 22 keeps track of 
matching sections found by the database servers and selects the index identification with a 
statistically sufficient number of matching sections. The redundancy in the algorithm 
translates into redundancy at the database level. In a large scale system, where each table is 
stored of a separate server, a failure of a single or few tables is not catastrophic, as the 
algorithm can still be used even on an incomplete set of tables. 

1 . Optimization of Lookup Methodology 

In one embodiment of the present invention, the stability values of each section of 
the fingerprint are used to optimize the fingerprint identification and reduce the processing 
requirements for identifying a match. As discussed above, as the most probable fingerprint 
is computed, one embodiment of the present invention creates a stability mask of sections 
(i.e., by using the stability value of the least stable bit in a given section, the section mask 
identifies which sections are most likely to be stable). When a fingerprint is uploaded to 
identification lookup server 22, only the most stable sections are used to compute a lookup 
which minimizes the amount of processing on the server. Of course, the size and number of 
sections, as well as the size of the fingerprint population determine the number of section 
matches required to adequately identify a given digital fingerprint. 
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Figure 4 sets fortnan optimized method for identifying a fingerprint. In one 
embodiment, identification lookup server 22 receives an entire digital fingerprint and 
section stability values corresponding to the sections of the fingerprint (step 202). 
Identification lookup server 22 then passes only the sections having the highest stability 
values to the appropriate section tables 26 of fingerprint section database 24 (step 204). In 
another embodiment, user device 40 passes to application server 23 only the sections 
having the highest stability values and their corresponding section identifications, which 
identification lookup server 22 uses to pass the sections to the appropriate section tables 26. 
In either form, the number of sections used for matching purposes depends on the number 
and size of the sections in the fingerprint and the size of the fingerprint population. 

Whether identification lookup server 22 or user device 40 selects the most stable 
sections, identification lookup server 22 tracks the matches in fingerprint section database 
24 to determine whether an index identification exists that possesses a statistically sufficient 
number of matches (Figure 4, steps 306 and 308). For example and in an embodiment 
where the fingerprint population is one million, identification lookup server 22 can pass the 
five most stable sections to the appropriate section tables 26 and select the digital fingerprint 
candidate, if any, that includes three matching sections. If no such index identification is 
found, all fingerprint sections, in one embodiment, are passed to fingerprint section 
database 24 (step 310). Identification lookup server 22 then performs the lookup using all 
sections (steps 312 and 308). If no index identification is found, an error message is 
generated (step 314). 

With respect to the above-provided description, one skilled in the art will readily 
recognize that the present invention has application in a variety of contexts. The foregoing 
description illustrates the principles of the present invention and provides examples of its 
implementation. For example, although an embodiment of the present invention has been 
described wherein user device 40 communicates with application server 22 over a computer 
network, user device can be directly connected to application server 22 to communicate 
digital fingerprint data. Accordingly, the above-provided description is not intended to limit 
the scope of the claims to the exact embodiments shown and described. 
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